Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f8b381-692a-4830-8d7d-21bf708f3cad/1/Uylu4zFT725pONV6KhMsHlJtxDA.mft
File:                     Uylu4zFT725pONV6KhMsHlJtxDA.mft (raw, json)
Hash identifier:          wl6e6YYLdEpeUXE6TJOSm5wB7rwMetDsAnn2xxggu+4=
Subject key identifier:   87:35:F6:7E:9E:DF:46:3E:FB:E1:CA:40:3F:CB:8F:BF:2D:D9:35:08
Authority key identifier: 53:29:6E:E3:31:53:EF:6E:69:38:D5:7A:2A:13:2C:1E:52:6D:C4:30
Certificate issuer:       /CN=53296ee33153ef6e6938d57a2a132c1e526dc430
Certificate serial:       01987908FD97EFE0E90190A93D685B453A1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Uylu4zFT725pONV6KhMsHlJtxDA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/f8b381-692a-4830-8d7d-21bf708f3cad/1/Uylu4zFT725pONV6KhMsHlJtxDA.mft
Manifest number:          14EF
Signing time:             Tue 05 Aug 2025 07:01:28 +0000
Manifest this update:     Tue 05 Aug 2025 07:01:28 +0000
Manifest next update:     Wed 06 Aug 2025 07:01:28 +0000
Files and hashes:         1: Uylu4zFT725pONV6KhMsHlJtxDA.crl (hash: UF1qTreBBcNDvDN9yDxBBNxoZFPUZ4AJNrV4FBcEDwU=)
                          2: kWgx2Wjql2LYt0QNUa7UD3E-ZNs.roa (hash: NPB7ZX6Td6/rM0WpZJID5mJD7qpTT41mPi5DDVNwg5U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/f8b381-692a-4830-8d7d-21bf708f3cad/1/Uylu4zFT725pONV6KhMsHlJtxDA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/f8b381-692a-4830-8d7d-21bf708f3cad/1/Uylu4zFT725pONV6KhMsHlJtxDA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Uylu4zFT725pONV6KhMsHlJtxDA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 07:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:79:08:fd:97:ef:e0:e9:01:90:a9:3d:68:5b:45:3a:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53296ee33153ef6e6938d57a2a132c1e526dc430
        Validity
            Not Before: Aug  5 07:01:28 2025 GMT
            Not After : Aug  6 07:01:28 2025 GMT
        Subject: CN=8735f67e9edf463efbe1ca403fcb8fbf2dd93508
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:84:97:77:0b:99:28:43:cd:07:5d:74:6a:c1:
                    ba:6b:7f:c3:b1:b7:9d:16:cc:3d:d9:70:be:db:c6:
                    dc:01:41:37:a8:fb:87:f9:22:1c:8c:9e:74:f9:6d:
                    4c:ce:14:32:34:60:41:50:fe:9b:7c:25:95:0d:b2:
                    3e:db:36:4b:d4:e6:d0:d7:49:f5:02:fa:0e:61:76:
                    7d:c3:37:b7:bd:4e:98:28:22:7c:58:38:eb:cc:0c:
                    7c:86:1b:7c:8b:94:70:cb:7c:6f:af:c8:7a:3c:1b:
                    b2:a1:dd:aa:92:d8:5d:62:a3:37:b2:e7:bc:f2:8a:
                    9c:84:d1:23:17:cd:84:5d:9e:2d:db:3b:d0:32:51:
                    48:a1:b5:31:c0:98:23:98:20:4b:8d:4f:d8:22:57:
                    6b:e3:29:ba:f0:ff:a4:0a:98:39:64:ab:fe:5f:88:
                    18:2f:ec:e1:c8:06:b1:41:21:5b:96:44:b3:4d:43:
                    f6:38:cc:0e:c3:be:6c:d5:d7:cc:fe:9a:a8:a8:98:
                    ce:18:ff:5b:7f:7c:a5:41:e9:23:4d:85:df:3c:e5:
                    65:a7:a8:4e:e4:ed:4c:99:92:08:4c:68:f6:cf:60:
                    4d:5e:72:fa:1c:1f:ed:18:fd:c0:8d:a9:4d:8e:5c:
                    3f:04:ff:53:d6:48:7a:8c:c9:e9:b6:b9:66:ca:fb:
                    f7:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:35:F6:7E:9E:DF:46:3E:FB:E1:CA:40:3F:CB:8F:BF:2D:D9:35:08
            X509v3 Authority Key Identifier:
                keyid:53:29:6E:E3:31:53:EF:6E:69:38:D5:7A:2A:13:2C:1E:52:6D:C4:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uylu4zFT725pONV6KhMsHlJtxDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f8b381-692a-4830-8d7d-21bf708f3cad/1/Uylu4zFT725pONV6KhMsHlJtxDA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f8b381-692a-4830-8d7d-21bf708f3cad/1/Uylu4zFT725pONV6KhMsHlJtxDA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:a1:49:5e:c8:d5:5e:32:e4:f7:b7:03:2f:13:2b:86:0c:d1:
         d4:fb:f8:85:59:4d:4b:80:10:1c:3c:e6:69:e2:17:d3:31:92:
         3f:76:f0:8f:53:ff:24:dc:c8:99:18:a4:e1:70:43:f8:5d:65:
         a2:ec:f8:56:ea:c6:d7:fd:b4:26:b1:8f:44:58:d5:a1:70:de:
         26:0a:04:3b:96:b9:68:c9:39:9e:6f:fe:80:12:68:65:63:06:
         f8:f7:cc:5a:10:54:25:1c:18:79:74:79:6f:2f:e6:c8:39:04:
         00:86:33:6a:6b:fb:8f:fd:dc:f6:c2:f8:c7:dc:09:32:48:f5:
         b4:a5:b7:e5:bf:eb:a1:4a:73:5d:60:96:ed:ac:5d:2f:ba:8c:
         37:34:4d:af:86:08:c0:8a:c8:d0:cc:cd:a0:e5:5b:0f:05:01:
         75:e9:3e:7f:be:b5:0f:04:7f:d5:23:5f:b1:aa:ff:88:04:85:
         2f:bd:8a:d8:59:6c:0a:b5:1e:ec:c8:e1:60:8e:fe:73:a4:80:
         97:4a:7a:55:c1:00:b9:c9:f7:55:d6:d5:ce:b5:f7:cc:6f:63:
         df:f5:c8:a7:44:52:7b:91:97:a0:e0:ba:d8:ef:66:12:54:46:
         77:19:d0:63:9d:30:fc:10:2a:37:90:48:0d:50:b9:1e:95:9a:
         1c:45:3d:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:20:14 2025 by rpki-client